AMENDMENTS TO THE CLAIMS: 



1. (Previously Presented) A method of managing risk related to a successful 
completion of a development project, comprising: 

storing a probability of occurrence (Pf) table having a plurality of risk categories, 
each said category having a plurality of table entries, each entry including a category- 
specific standardized qualitative probability definition associated with a Pf rating and a 
severity of consequence (Cf) table, and identified risks in a shared risk database; and 

via a web browser, a plurality of users, 

formulating an enterprise search of the risk database to identify at least 

one risk, 

viewing the Pf table to select a probability of occurrence Pf for said at 
least one risk; and 

viewing the Cf table to select a severity of consequence Cf for said at least 
one risk, said Pf and Cf being combined and ranked to define prioritized risk factors Rf. 

2. (Previously Presented) The method of claim 1, wherein the severity of 
consequence table has cost and schedule impact categories, each said category having a 
plurality of table entries, each entry including a standardized qualitative impact definition 
and a project-specific amount associated with a Cf rating. 

3. (Previously Presented) The method of claim 1, further comprising a user having 
administrative access not provided to said plurality of users first tailoring the probability 
of occurrence table via the web browser to the select a reduced number of categories that 
are relevant to the current development project and storing the tailored probability of 
occurrence table on the shared risk database with access to said plurality of users. 



2 



4. (Previously Presented) The method of claim 2, wherein the table entries in the 
schedule impact category specify a project-specific amount in days, weeks or months and 
the table entries in the cost impact category include multiple sub-categories of project- 
specific cost impacts in actual dollars for the development project. 

5. (Original) The method of claim 4, wherein said multiple sub-categories include 
development cost (NRE), unit cost (DTC) and operations and support (O/S) categories. 

6. (Previously Presented) The method of claim 4, further comprising a user having 
administrative access not provided to said plurality of users first tailoring the severity of 
consequence table to select the cost impact sub-categories and specify their dollar 
amounts and to specify the schedule impact in days, weeks or months for the current 
development project and storing the tailored probability of occurrence table on the shared 
risk database with access to said plurality of users. 

7. (Original) The method of claim 1, wherein the enterprise search includes a 
combination of at least two parameters including current or historic, risk factor, vendor, 
component, functional area, category, key work in risk title, key work in risk description, 
IPT, actionee, actionee/team lead/submitter or risk number. 

8. (Original) The method of claim 7, wherein the enterprise search results list at 
least one risk including a combination of risk number, program, risk title and a current 
risk factor. 

9. (Previously Presented) The method of claim 29, wherein the web browser 
provides a transfer link from said at least one risk with its risk mitigation plan to import 
the selected risk and mitigation plan into another program. 
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10. (Previously Presented) The method of claim 29, wherein in the mitigation search 
includes a combination of at least two parameters including a risk description, risk status, 
start date, original planned complete date, planned complete date and complete date. 

1 1 . (Previously Presented) The method of claim 29, further including automatically 
generating risk reports including identified risks, prioritized risk factors and mitigation 
plans. 

12. (Previously Presented) The method of claim 11, wherein a risk review board 
(RRB) report is generated by; 

submitting minutes for a RRB meeting by entering information for each risk 
covered during a RRB meeting and entering the date of the RRB meeting; and 

submitting the minutes to generate the RRB report including Number, Title, 
Actionee, Rf, Risk Level and Comments for each risk. 

13. (Previously Presented) The method of claim 29, wherein the web browser has an 
interface that includes a menu bar with pull-down menu items and menu sub-items for 
viewing the current program, conducting the enterprise search and conducting the 
mitigation search and hyperlinks to the Pf and Cf tables. 

14. (Previously Presented) The method of claim 29, wherein the identified risks, risk 
factors and mitigation plans for each user are stored in the shared risk database. 

15-18. cancelled 

19. (Previously Presented) A web-based risk management system for managing risk 
related to a successful completion of a development project, comprising: 

a server comprising a shared risk database that stores a probability of occurrence 
(Pf) table having a plurality of risk categories, each said risk category having a plurality 
of table entries, each entry including a category-specific standardized qualitative 
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probability definition associated with a Pf rating and a severity of consequence (Cf) table, 
risk identification information and risk mitigation information; 

a web-based risk management tool on the server that provides standardized 
interfaces for searching, viewing and entering information to and from the shared risk 
data base via a web browser; 

an intranet; and 

a plurality of computer workstations in communication with the server via the 
intranet, each said workstation provided with a web browser to search the database using 
the standardized interfaces to identify risks, to select entries from the Pf and Cf tables and 
to calculate and prioritize a risk factor Rf for each risk. 

20. (Currently Amended) The system of claim %Z 34, wherein the tool's standardized 
interface includes a menu bar with pull-down menu items and menu sub-items to view 
the current programs, to view program risks, to conduct an enterprise search to identify 
risks and to formulate the risk mitigation search to identify mitigation plans and 
hyperlinks to the Pf and Cf tables. 

21. (Previously Presented) The system of claim 19, wherein the Cf table has a 
schedule impact category with table entries, each entry including a standardized 
qualitative impact definition and a project-specific schedule impact amount in days, 
weeks or months and having a cost impact category with table entries, each entry 
including a standardized qualitative impact definition and project-specific cost impact 
amounts for multiple sub-categories of cost impacts in actual dollars for the development 
project, said web browser providing administrative access to at least one user to tailor the 
Pf table to have fewer categories that are relevant to the current project and the Cf table 
to specify the amounts in days, weeks or months of the table entries in the schedule 
impact category and the amounts in actual dollars for the multiple sub-categories in the 
cost impact category. 
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22. (Currently Amended) The system of claim 33 34, wherein the workstation via the 
web browser submits an enterprise search that includes a combination of at least two 
parameters including current or historic, risk factor, vendor, component, functional 
area, category, key word in risk title, key word in risk description, IPT, actionee, 
actionee/team lead/submitter or risk number and the server returns via the web 
browser an enterprise search results list including for at least one risk a combination 
of risk number, program, risk title, a current risk factor and its risk mitigation plan. 

23. (Currently Amended)The system of claim 33 34, wherein the workstation via the 
web browser submits a mitigation search that includes a combination of at least two 
parameters including a risk description, risk status, start date, original planned 
complete date, planned complete date and complete date and the server returns 
existing mitigation plans that satisfy the search parameters. 

24. (Currently Amended)The system of claim 33 34, wherein the workstations 
automatically submit identified risks, risk factors and mitigation plans to the shared 
database, said server automatically generating risk reports including identified risks, 
prioritized risk factors and mitigation plans for the current project. 

25-28 cancelled 

29. (Previously Presented) The method of claim 1, wherein existing risk mitigation 
plans for different risks are stored in the shared database, further comprising: 

formulating a mitigation search of the risk database to identify existing risk 
mitigation plans for the identified risk; 

formulating a new risk mitigation plan that's builds upon the one or more existing 
risk mitigation plans; 

storing the new risk mitigation plan on the shared database; and 

implementing the new risk mitigation plan. 
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30. (Previously Presented) The method of claim 29, wherein the mitigation search 
identifies both successful and unsuccessful existing risk mitigation plans. 

31 . (Previously Presented) The method of claim 29, further comprising; 
aggregating the risk mitigation plans from a plurality of different users and 

different programs to update and store a risk mitigation plan on the shared database. 

32. (Previously Presented) The method of claim 29, further comprising: 
sharing resources with other programs to implement the mitigation plan. 

33. (Previously Presented) The method of claim 29, where the risk mitigation plan 
includes a number of activities, each activity including a description and an assigned 
Pf and Cf rating. 

34. (Previously Presented) The system of claim 19, wherein existing risk mitigation 
plans for different risks are stored in the shared database, said web browser 
configured to formulate a mitigation search of the risk database to identify existing 
risk mitigation plans for the identified risk, formulate a new risk mitigation plan that's 
builds upon the one or more existing risk mitigation plans, and store the new risk 
mitigation plan on the shared database. 

35. (Previously Presented) The system of claim 34, wherein the mitigation search 
identifies both successful and unsuccessful existing risk mitigation plans., 

36. (Previously Presented) The system of claim 34, wherein the web browser 
facilitates sharing resources with other programs to implement the mitigation plan. 
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